[DERBY-709] SecurityException thrown when passing a relative path name when backing up database

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 10.0.2.0, 10.1.1.0, 10.2.1.6
• Fix Version/s: 10.2.1.6
• Component/s: Store
• Bug behavior facts: Security
• Assignee: Suresh Thalamati
• Reporter: Daniel John Debrunner
• Created: 16/Nov/05 11:04
• Updated: 30/Jun/09 00:14
• Resolved: 08/Mar/06 02:24

Description

CALL SYSCS_UTIL.SYSCS_BACKUP_DATABASE('extinout/bkup1');
ERROR 38000: The exception 'java.security.AccessControlException: access denied
(java.util.PropertyPermission user.dir read)' was thrown while evaluating an exp
ression)

Can be seen in the store/encryptionKey.sql test, modify the _app.properties file to enable the security manager.

Due to logging messages using File.getCanonicalPath in RawStore.java, lines 675 and 686.

Possible solutions:

• use a privileged block and required user.dir permission granted to user.dir to backup to a relative directory
• use a privileged block,if a security exception is thrown then just display the relative name, otherwise display the full name. This would allow backups to succeed without requiring granting additional permissions to derby.jar
• just log the relative path